Re: npf syntax: port ranges, negation of a condition, and map rules

2020-10-30 Thread Rocky Hotas
On ott 29 10:16, Michael van Elst wrote: > The "port forwarding case" only handles single ports. You need > separate map commands for each port. After several errors, I was wondering in fact if this was the reason. Thanks for clarifying this! Rocky

Re: npf syntax: port ranges, negation of a condition, and map rules

2020-10-29 Thread Michael van Elst
rockyho...@firemail.cc (Rocky Hotas) writes: >In particular, for example, >map $myif dynamic proto tcp $myhost port 33434-33435 <- $myif port 55000-55001 >doesn't work: ># npfctl reload >/etc/npf.conf:41:92: port range is not valid near '55001' The "port forwarding case" only handles single p

Re: npf syntax: port ranges, negation of a condition, and map rules

2020-10-28 Thread Rocky Hotas
On ott 28 12:22, Martin Husemann wrote: > There is an example in /usr/share/examples/npf/host-npf.conf: > > # Allow being tracerouted > pass in proto udp to any port 33434-33600 This is a single use (but thanks! I forgot this example file). My case is double, because I would like to map

Re: npf syntax: port ranges, negation of a condition, and map rules

2020-10-28 Thread Martin Husemann
On Wed, Oct 28, 2020 at 12:16:36PM +0100, Rocky Hotas wrote: > 1) How to represent port ranges? I tried with > > beginning_port:end_port (which for example is used in OpenBSD's pf) > beginning_port,end_port > beginning_port-end_port > > $port_range = { beginning_port, end_port } > > but none of

npf syntax: port ranges, negation of a condition, and map rules

2020-10-28 Thread Rocky Hotas
Hello! After browsing the available documentation for npf, I did not find any hints about some issues. 1) How to represent port ranges? I tried with beginning_port:end_port (which for example is used in OpenBSD's pf) beginning_port,end_port beginning_port-end_port $port_range = { beginning_port,

Re: NPF syntax

2015-03-20 Thread Mindaugas Rasiukevicius
"J. Lewis Muir" wrote: > > "D'Arcy J.M. Cain" wrote: > >> I have decided to give up on pf after banging my head against > >> the wall (and the OBSD mailing list) and try npf but I > >> can't figure out the syntax. I followed the example at > >> http://www.netbsd.org/~rmind/npf/ but I keep gettin

Re: NPF syntax

2015-03-18 Thread J. Lewis Muir
On 3/17/15 6:34 PM, Mindaugas Rasiukevicius wrote: Hi, Mindaugas. First, let me say thank you for your excellent work on NPF! > "D'Arcy J.M. Cain" wrote: >> I have decided to give up on pf after banging my head against >> the wall (and the OBSD mailing list) and try npf but I >> can't figure ou

Re: NPF syntax

2015-03-17 Thread Mindaugas Rasiukevicius
"D'Arcy J.M. Cain" wrote: > I have decided to give up on pf after banging my head against the wall > (and the OBSD mailing list) and try npf but I can't figure out the > syntax. I followed the example at http://www.netbsd.org/~rmind/npf/ > but I keep getting errors when I validate. I reduced npf

Re: NPF syntax

2015-03-17 Thread rudolf
D'Arcy J.M. Cain wrote: On Mon, 16 Mar 2015 20:37:16 +0100 rudolf wrote: Are you using an older version of NPF? This seems like 3) in this email from two years ago: https://mail-index.netbsd.org/netbsd-users/2013/04/13/msg012733.html I am running NetBSD 6.1.5_PATCH. I guess that doesn't have

Re: NPF syntax

2015-03-17 Thread D'Arcy J.M. Cain
On Mon, 16 Mar 2015 20:37:16 +0100 rudolf wrote: > Are you using an older version of NPF? This seems like 3) in this > email from two years ago: > https://mail-index.netbsd.org/netbsd-users/2013/04/13/msg012733.html I am running NetBSD 6.1.5_PATCH. I guess that doesn't have the most current vers

Re: NPF syntax

2015-03-16 Thread g . lister
On Mon Mar 16 15:08:38 2015 GMT+0100, Andy Ruhl wrote: > On Mon, Mar 16, 2015 at 6:52 AM, D'Arcy J.M. Cain wrote: > > > I have decided to give up on pf after banging my head against the wall > > (and the OBSD mailing list) and try npf but I can't figure out the > > syntax. I followed the examp

Re: NPF syntax

2015-03-16 Thread rudolf
D'Arcy J.M. Cain wrote: [...] table type tree file "/VEX/general/pf/friends.list" table type tree file "/VEX/general/pf/enemies.list" This gives me this error: # npfctl validate npfctl: table '0' is already defined If I remove one line I get this: # npfctl validate table <0> type tree [...

Re: NPF syntax

2015-03-16 Thread D'Arcy J.M. Cain
On Mon, 16 Mar 2015 18:26:58 GMT Gerard Lally wrote: > At date and time Mon, 16 Mar 2015 09:52:07 -0400, D'Arcy J.M. Cain > wrote: > > # npfctl validate > > /etc/npf.conf:11:3: syntax error near 'alg' > > > > I am using the example config almost verbatim except for the table > > names and file pa

Re: NPF syntax

2015-03-16 Thread Gerard Lally
At date and time Mon, 16 Mar 2015 09:52:07 -0400, D'Arcy J.M. Cain wrote: > I have decided to give up on pf after banging my head against the wall > (and the OBSD mailing list) and try npf but I can't figure out the > syntax. I followed the example at http://www.netbsd.org/~rmind/npf/ > but I kee

Re: NPF syntax

2015-03-16 Thread Andy Ruhl
On Mon, Mar 16, 2015 at 6:52 AM, D'Arcy J.M. Cain wrote: > I have decided to give up on pf after banging my head against the wall > (and the OBSD mailing list) and try npf but I can't figure out the > syntax. I followed the example at http://www.netbsd.org/~rmind/npf/ > but I keep getting errors

NPF syntax

2015-03-16 Thread D'Arcy J.M. Cain
I have decided to give up on pf after banging my head against the wall (and the OBSD mailing list) and try npf but I can't figure out the syntax. I followed the example at http://www.netbsd.org/~rmind/npf/ but I keep getting errors when I validate. I reduced npf.conf to the following two lines: